CVE Vulnerabilities

CVE-2022-36454

Published: Oct 25, 2022 | Modified: Oct 28, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to impersonate another users name.

Affected Software

Name Vendor Start Version End Version
Micollab Mitel * 9.5.0.101 (including)

References